FEDORA-EPEL-2025-7f793012aa — security update for yarnpkg

stable

FEDORA-EPEL-2025-7f793012aa created by smani a year ago for Fedora EPEL 8

Sync with rawhide.

This update has been submitted for testing by smani.

This update's test gating status has been changed to 'ignored'.

This update has been pushed to testing.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

approved

a year ago

Builds

BZ#2317786 CVE-2024-48949 yarnpkg: Missing Validation in Elliptic's EDDSA Signature Verification [epel-8]

BZ#2355665 CVE-2024-12905 yarnpkg: link following and path traversal via maliciously crafted tar file [epel-8]

yarnpkg-1.22.22-7.el8

ignored